Wiking Posted September 7, 2018 ID:1268164 Share Posted September 7, 2018 I was sure I infected my wifes computor, but looking in the tack manager i didn't find the KSM connection broker. But she must have been clicking all links maild to her because there were a lot of threats. I have attached the logfiles from the scans. malware.txt Addition.txt AdwCleaner[C00].txt FRST.txt Link to post Share on other sites More sharing options...
nasdaq Posted September 7, 2018 ID:1268217 Share Posted September 7, 2018 Hi, === Remove this program in bold via the Control Panel > Programs > Programs and Features.Teoma Media Search App (HKLM-x32\...\{41525332-2D54-4D47-00A7-A758B70C2F04}) (Version: 12.47.4.352 - APN, LLC) === Please download the attached Fixlist.txt file to the same folder where the Farbar tool is running from. The location is listed in the 3rd line of the FRST.txt log you have submitted. Run FRST and click Fix only once and wait. The tool will create a log (Fixlog.txt) please post it to your reply. === If not already done please run the Malwarebytes and delete all the items found. Restart the computer normally. Let me know what problem persists. fixlist.txt Link to post Share on other sites More sharing options...
Wiking Posted September 7, 2018 Author ID:1268248 Share Posted September 7, 2018 Ran Malwarebytes again and quarantined the threats. Teoma Media Search App disapeard with the malware scan. I attached the fixlog. Fixlog.txt Link to post Share on other sites More sharing options...
nasdaq Posted September 7, 2018 ID:1268257 Share Posted September 7, 2018 Is the computer running well? Link to post Share on other sites More sharing options...
Wiking Posted September 7, 2018 Author ID:1268303 Share Posted September 7, 2018 It is super slow, but i never use is so it might be the way it has always been. Link to post Share on other sites More sharing options...
nasdaq Posted September 8, 2018 ID:1268393 Share Posted September 8, 2018 Hi, Is this computer normally used by someone in the house, or is it a space unit. --RogueKiller-- Download & SAVE to your Desktop Download RogueKiller Quit all programs that you may have started. Please disconnect any USB or external drives from the computer before you run this scan! For Vista or above, right-click the program file and select "Run as Administrator" Accept the user agreements. Execute the scan and wait until it has finished. If a Windows opens to explain what [PUM's] are, read about it. Click the RoguKiller icon on your taksbar to return to the report. Click open the Report Click Export TXT button Save the file as ReportRogue.txt Click the Remove button to delete the items in RED Click Finish and close the program. Locate the ReportRogue.txt file on your Desktop and copy/paste the contents in your next. ======= Link to post Share on other sites More sharing options...
Wiking Posted September 8, 2018 Author ID:1268418 Share Posted September 8, 2018 (edited) This poor computor is a Facebook laptop used as a coffe mug coster haft the time. I just notised that it is a Pentium 1,7Ghz processor, that might be why I find it so slow. I have attached the report. Didn't se any red ones and i didn't find a remove button. ReportRogue.txt Edited September 8, 2018 by Wiking Link to post Share on other sites More sharing options...
nasdaq Posted September 8, 2018 ID:1268427 Share Posted September 8, 2018 Well at least you have some backup should your regular one fails. Link to post Share on other sites More sharing options...
Root Admin AdvancedSetup Posted September 20, 2018 Root Admin ID:1270468 Share Posted September 20, 2018 Since this issue is resolved the topic will now be closed to prevent others from posting here. If you need assistance please start your own new topic and someone will be happy to assist you. Thanks Link to post Share on other sites More sharing options...
Recommended Posts